Submit #702483: MuYuCMS 2.7 CWE-22: Improper Limitation of a Pathname to a Restricted Directinfo

TitelMuYuCMS 2.7 CWE-22: Improper Limitation of a Pathname to a Restricted Direct
BeschreibungA directory traversal vulnerability exists in MuYuCMS version 2.7 within the accessory management module. The vulnerability is located in the picdel method of Accessory.php, where the 'picdelur' parameter is used to construct file paths for deletion without proper sanitization.
Quelle⚠️ https://gist.github.com/b1uel0n3/48ec32d52e1533df88465c9c834536bb
Benutzer
 b1uel0n3 (UID 93016)
Einreichung27.11.2025 04:58 (vor 10 Monaten)
Moderieren16.12.2025 14:18 (19 days later)
StatusDuplikat
VulDB Eintrag224187 [MuYuCMS 2.2 /accessory/picdel.html Denial of Service]
Punkte0

Want to know what is going to be exploited?

We predict KEV entries!